CVE-2018-7364

Published: Dic 07, 2018 Last Modified: Nov 21, 2024 EU-VD ID: EUVD-2018-19096 Aliases: GSD-2018-7364
ExploitDB:
Other exploit source:
Google Dorks:
HIGH 8,3
Source: [email protected]
Attack Vector: network
Attack Complexity: high
Privileges Required: none
User Interaction: required
Scope: changed
Confidentiality: high
Integrity: high
Availability: high
HIGH 10,0
Source: [email protected]
Access Vector: network
Access Complexity: low
Authentication: none
Confidentiality: complete
Integrity: complete
Availability: complete

Description

AI Translation Available

All versions up to ZXINOS-RESV1.01.43 of the ZTE ZXIN10 product European region are impacted by improper access control vulnerability. Due to improper access control to devcomm process, an unauthorized remote attacker can exploit this vulnerability to execute arbitrary code with root privileges.

EPSS (Exploit Prediction Scoring System)

Trend Analysis

EPSS (Exploit Prediction Scoring System)

Prevede la probabilità di sfruttamento basata su intelligence sulle minacce e sulle caratteristiche della vulnerabilità.

EPSS Score
0,0818
Percentile
0,9th
Updated

EPSS Score Trend (Last 90 Days)

284

Improper Access Control

Incomplete
Abstraction: Pillar Structure: Simple
Common Consequences
Security Scopes Affected:
Other
Potential Impacts:
Varies By Context
Applicable Platforms
Technologies: ICS/OT, Not Technology-Specific, Web Based
View CWE Details
Application

Zxin10 by Zte

Product Information
Vendor Zte
Product Zxin10
Version Range Affected
To resv1.01.44 (exclusive)
cpe:2.3:a:zte:zxin10:*:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
https://github.com/orangecertcc/security-research/security/…
Exploit Third Party Advisory
https://github.com/orangecertcc/security-research/security/advisories/GHSA-34f2…
https://support.zte.com.cn/support/news/LoopholeInfoDetail.…
Vendor Advisory
https://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1009943
http://support.zte.com.cn/support/news/LoopholeInfoDetail.a…
Vendor Advisory
http://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1009943
https://github.com/orangecertcc/security-research/security/…
Exploit Third Party Advisory
https://github.com/orangecertcc/security-research/security/advisories/GHSA-34f2…
https://support.zte.com.cn/support/news/LoopholeInfoDetail.…
Vendor Advisory
https://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1009943
http://support.zte.com.cn/support/news/LoopholeInfoDetail.a…
Vendor Advisory
http://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1009943